Find Latest Jobs in Pakistan

• Supporting and advocating information security design & practices across the Bank
• Responsible for implementation of controls to build and enhance the GRC program
• Providing guidance and assurance activities within agile change initiatives
• Inline the practices with regulations, compliance and bank’s policies.
• Execute the Information Security Awareness Program
• Making sure appropriate security testing is completed
• Identifying and reporting on applicable security management information
• Collaborate with IT and business stakeholders to understand risks to critical infrastructure by defining potential business impacts.
• Assess 3rd party vendors for adherence to standards
• Drive risk analysis for internal and external third-party risk assessments by designing controls and implementing industry best practice processes for teams and technologies utilized across the organization.
• Recommend programmatic and technical directions and operate with a high degree of independence in matters relating to the investigation, impact, and analysis of security incidents, decisions regarding risk, and measures for computer and network security.
• Conducting risk assessments and providing guidance on remediation activities
• Execute system-wide information security compliance program, ensuring IT activities, processes, and procedures meet defined requirements, policies and regulations.
• Perform control assessments against cybersecurity framework, policies, standards etc
• Conduct and/or coordinate security review processes.
• Working experience of security tools like TM Apex, Classification, DLP, NAC, Encryption, EDR, Deep Security MFA, IAM, etc

Job Requirements

Core Competencies:

• Proficiency and technical/Information Security knowledge with system and network security devices
• Consulting and ability to handle multiple projects.
• Good written and verbal communication skills.
• Quality (adherence to standards), timeliness and result oriented.
• Quick learner, pro-active and positive mind.
• Identifies and resolves problems in a timely manner; Gathers and analyzes information skillfully
• Prioritizes and plans work activities; Uses time efficiently; Completes administrative tasks correctly and on time; Follows instructions and responds to management direction.

Professional Certification/Training:

• CISSP
• CISM
• ITIL
• CRISC/ISO27005
• ISO 27001LA/LI